REMARKS 

The Office Action dated March 16, 2007 has been received and carefully noted. 
The following remarks are submitted as a full and complete response thereto. 
Claims 1-28 are respectfully submitted for consideration. 

The Office Action rejected claims 1-28 under 35 U.S.C. 102(b) as being 
anticipated by US Patent Publication No. 2002/0038371 to Spacey (Spacey). Applicants 
submit that Spacey fails to disclose or suggest all of the features recited in any of the 
pending claims. 

Claim 1, from which claims 2-6 depend, is directed to a network device for 
managing a communication over a network. A transceiver is configured to send and to 
receive the communication over the network. A processor, coupled to the transceiver, is 
configured to receive a proxy request from a client through a secure tunnel. The 
processor is further configured to modify the proxy request to include a security attribute 
inherent from the secure tunnel. The modified proxy request is forwarded to a proxy 
service. The security attribute enables a proxy connection through the secure tunnel. 

Claim 7, from which claims 8 and 9 depend, is directed to an apparatus for 
managing a communication over a network. A transceiver is configured to send and to 
receive the communication over the network. A processor, coupled to the transceiver, is 
configured to establish a secure tunnel between the apparatus and a client, A proxy 
request is received from the client through the secure tunnel. The proxy request is 
modified to include a security attribute inherent from the secure tunnel. The modified 
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proxy request is forwarded to a proxy service, wherein the security attribute enables a 
proxy connection through the secure tunnel. 

Claim 10, from which claims 11-17 depend, is directed to a method for managing 
a communication over a network. A proxy request is received from a client through a 
secure tunnel. The proxy request is modified to include a security attribute. The modified 
proxy request is forwarded to a proxy service, wherein the security attribute enables a 
proxy connection through the secure tunnel. 

Claims 18, from which claims 19-26 depend, is directed to a system for managing 
a communication over a network. A client is configured to determine a secure tunnel, 
and send a proxy request through the determined secure tunnel. A server, coupled to the 
client, is configured to receive the proxy request from the client through the secure 
tunnel, and modify the proxy request to include a security attribute inherent from the 
secure tunnel. The server is further configured to forward the modified proxy request to a 
proxy service, wherein the security attribute enables a proxy connection through the 
secure tunnel. 

Claim 27, from which claim 28 depends, is directed to an apparatus for managing 
a communication over a network. A transceiver arranged to send and to receive the 
communication over the network. A processor, coupled to the transceiver, is configured 
to receive a proxy request from a client through a secure tunnel. A means for modifying 
the proxy request is configured to include a security attribute inherent from the secure 
tunnel. The apparatus further includes a means for forwarding the modified proxy 
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request to a proxy service, wherein the security attribute enables a proxy connection 
through the secure tunnel. 

Applicants submit that each of the pending claims recites features that are neither 
disclosed nor suggested in Spacey. 

Spacey is directed to a method allowing communications to pass between private 
network segments without the need for holes in the firewalls of those networks. The 
method uses an Intermediary machine located somewhere on a public network as 
described herein. A component in the private service network opens one or more 
outbound connections to the Intermediary and leaves these connections open waiting for 
a response. These outbound connections pass transparently through any restrictive 
firewalls on the private service network since these firewalls are typically set-up to block 
only unprompted inbound requests. A component on the client private network then 
connects to the same Intermediary with an outbound connection and sends it a request 
that should be serviced by a server located on the otherwise inaccessible private service 
network. The Intermediary passes this client request on to the private service network as 
a response to the waiting outbound connection previously opened by the service network 
component to the Intermediary. The client request thus enters the private service network 
a response to a previously opened outbound connection from the service component and 
so, is not blocked by the private service networks firewall. The service component 
reformats the request and transmits it on to the service machine in the private network as 
required. 
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Applicants respectfully submit that Spacey fails to disclose or suggest at least the 
features of "modifying the proxy request to include a security attribute and forwarding 
the modified proxy request to a proxy service, wherein the security attribute enables a 
proxy connection through the secure tunnel", as recited in claim 1 and similarly recited in 
claims 7, 10, 18, and 27. Spacey merely discloses an optional encapsulation of the 
datagram client request in a network packet that is routable to the intermediary, wherein 
the client sends a network layer request to the address of the destination service 
application located on a different network element or subnet. See Figs. 6 and 8 and 
paragraphs [0122] - [0127]. Thus, Spacey does not disclose or suggest modifying the 
datagram with a security attribute inherent from the secure tunnel, and then forwarding a 
modified datagram. In other words, the datagram is not modified with the security 
attribute while passing through the secure tunnel, then forwarded to the proxy service. 

In the "Response to Arguments" section, the Office Action cites paragraph 
[0016] of Spacey. Paragraph [0016] of Spacey merely mentions that Spacey "differs 
from any existing VPN including (. . . L2F, L2TP . . .) in that communication is via an 
intermediary and in that, the proxy client and optional modified router component are 
preferably required on each network or machine". However, Spacey does not disclose or 
suggest the features mentioned above. Applicants submit that in Spacey, the deficiency 
still remains that the datagram is not modified with the security attributes while passing 
through the secure tunnel, then forwarded to the proxy service, as clearly recited in the 
pending claims. This deficiency is further evidenced in that Spacey is teaching away from 
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the use of a L2TP encapsulation because of its use of an intermediary (See [0016] and 
also paragraphs [0122] - [0124] of Spacey). 

Applicants submit that because claims 2-6, 8, 9, 11-17, 19-26 and 28 depend from 
claims 1, 7, 10, 18 and 27, these claims are allowable at least for the same reasons as 
claims 1,7, 10, 18 and 27, as well as for the additional features recited in these dependent 
claims. 

Based at least on the above, Applicants submit that Spacey fails to disclose or 
suggest all of the features recited in claims 1-28. Accordingly, withdrawal of the 
rejection under 35 U.S.C. 102(b) is respectfully requested. 

Applicants submit that each of claims 1-28 is in condition for allowance. 
Accordingly, it is respectfully requested that each of claims 1-28 be allowed, and this 
application passed to issue. 

If for any reason the Examiner determines that the application is not now in 
condition for allowance, it is respectfully requested that the Examiner contact, by 
telephone, the applicants' undersigned attorney at the indicated telephone number to 
arrange for an interview to expedite the disposition of this application. 
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In the event this paper is not being timely filed, the applicants respectfully petition 
for an appropriate extension of time. Any fees for such an extension together with any 
additional fees may be charged to Counsel's Deposit Account 50-2222. 

Respectfully submitted, 




David E. Brown 
Registration No. 51,091 
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